Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
File: HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft (raw, json)
Hash identifier: 3+MsVOoQReAAUtXHBuJBmqJ6UnJOBlJ4uiTBYPcxiJ4=
Subject key identifier: F3:C5:1F:47:F2:AD:59:C5:31:DD:C0:63:98:24:96:43:90:C7:B1:76
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Certificate issuer: /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial: 019768F30EABCCDD622D58E6526990C36EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
Manifest number: 12CD
Signing time: Fri 13 Jun 2025 11:00:48 +0000
Manifest this update: Fri 13 Jun 2025 11:00:48 +0000
Manifest next update: Sat 14 Jun 2025 11:00:48 +0000
Files and hashes: 1: HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl (hash: 3U7Hb1jDACAJtzbgjV33J9R+QgHIg8wWAaCSGSXSlXo=)
2: aW4RufV84k31ipqteYJMKE-MWns.roa (hash: TaIvFNKhSLJsRmqi1+QKHEIHNXDSbVD+wo6DE/PVLR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:0e:ab:cc:dd:62:2d:58:e6:52:69:90:c3:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Validity
Not Before: Jun 13 11:00:48 2025 GMT
Not After : Jun 14 11:00:48 2025 GMT
Subject: CN=f3c51f47f2ad59c531ddc0639824964390c7b176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:c8:86:8c:f4:1f:9a:75:c0:82:50:fb:26:
0b:05:5c:f0:37:12:fd:25:17:ce:7a:97:6f:3d:1c:
a9:77:6e:8e:73:82:5c:f6:ac:ee:cf:4f:63:30:47:
e8:c4:16:8f:91:5a:81:09:af:f7:76:60:44:35:8e:
5d:13:94:a4:3d:f7:8d:ca:5d:8e:d0:27:7d:b2:f8:
7f:80:0f:d8:b1:e9:61:42:c8:f1:c8:12:a2:a9:cd:
aa:f3:00:01:07:f3:9c:25:e3:6b:e4:f1:a3:ac:1a:
cb:2e:01:6c:96:9b:e0:69:4b:6a:41:04:fc:51:ca:
a5:29:5d:09:ee:9b:6e:d1:20:08:d1:62:e4:0a:06:
48:e7:97:2f:e4:50:44:36:5f:f1:71:9d:df:6c:0a:
30:4c:e6:2d:53:64:dc:75:ff:4b:84:1e:62:f2:0b:
b6:ab:9a:53:6b:84:64:73:56:ba:74:81:2d:43:e1:
96:85:fb:22:30:95:fc:fa:f5:52:57:cc:bf:fb:67:
f4:99:dc:39:b1:46:bf:2a:af:4e:26:d7:a4:b9:f7:
de:34:31:b4:41:e6:c2:1d:c7:4b:1c:81:54:71:5a:
4e:3a:db:63:58:9d:17:b7:fc:ec:51:a7:ae:2f:a4:
2b:f4:aa:5f:f3:b2:c4:a8:11:90:67:52:ae:cd:99:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C5:1F:47:F2:AD:59:C5:31:DD:C0:63:98:24:96:43:90:C7:B1:76
X509v3 Authority Key Identifier:
keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8e:4b:72:39:3d:98:e6:16:50:c0:b3:27:bc:da:4a:e8:aa:
b3:56:63:ea:96:9f:d8:3d:23:06:04:3a:c7:89:fb:53:c9:94:
28:03:22:e3:46:c3:91:d3:1e:fa:63:98:61:02:c5:c2:86:a2:
e7:09:4a:de:cf:b5:12:b6:3d:bb:4b:53:91:38:1b:38:27:4d:
c0:67:e8:0e:19:a9:fd:e7:63:68:12:8b:d2:a4:1e:1a:74:ff:
06:d6:06:25:2c:ab:1b:39:91:b4:db:da:6f:db:8c:ec:1d:ae:
00:70:41:be:11:4e:a8:09:dd:10:38:c4:61:e7:d7:20:fd:b3:
6c:b6:fa:dd:8d:23:d0:73:7f:8c:12:a9:2b:d8:14:9a:94:b7:
62:b2:17:0b:f6:04:d6:7e:6a:d1:e5:fd:9f:f0:e5:ed:2a:03:
2d:02:b6:9e:12:65:6b:57:e4:e5:c0:68:ca:6b:ef:03:07:e2:
ce:02:b1:31:7f:c6:f7:26:68:0e:d2:0d:c0:58:e5:0a:03:07:
8d:31:57:8b:43:46:91:ba:f9:f0:25:c6:81:8e:48:4f:c3:ae:
9a:a3:ad:e3:32:9e:dd:40:5b:26:ba:f3:34:74:f5:33:b5:04:
a8:84:56:a6:8a:fb:60:98:24:67:72:52:50:f6:a5:b7:87:93:
eb:9f:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:59 2025 by rpki-client